Application Filing Date: July 16, 2003 

Title: System and Method for the Transmission, Storage and 
Retrieval of Authenticated Electronic Original Documents. 
Inventor(s): Stephen F. Bisbee et al. 
Application Serial No.: unassigned 

Sheet 1 of 8 




false 



Figure 1 



Title: System and Method for the Transmission, Storage and 
Retrieval of Authenticated Electronic Original Documents. 
Inventor(s): Stephen F. Bisbee etal. 
Application Serial No.: unassigned 

Sheet 2 of 8 



o 



15^ 



Schedule 
publishing of 
CRLs & Delta 
CRLs 



CA Administrator 



Revoke, 
suspend or 

reinstate 
certificate 



159; 



201/ 



CA 
publishes 
CRLs 





PKI 



20^ 205; 



CSS 
207/ 



Retrieve 
CRL on 
schedule or 
notice 




Time to 
retrieve 
CRL(s) 




Get 
CRL(s) 







121/ 













Certificate 
Status Store 




Add certificate 




Parse 




status to cache 
in CSS store 


«4 


CRL(s) 



209, 



Figure 2 



application Filing Date: July 16, 2003 

Title: System and Method for the Transmission, Storage and 

RETRIEVAL OF AUTHENTICATED ELECTRONIC ORIGINAL DOCUMENTS. 

Inventor(s): Stephen F. Bisbee et al. 
Application Serial No.: unassigned 






Figure 3 



Application Filing Date: July16,20Uw1 

Title- System and Method for the Transmission, Storage and 
Retrieval of Authenticated Electronic Original Documents. 
Inventor(s): Stephen F. Bisbee et al. 

Application Serial No.: unassigned ^ Qp g 



Signature Block Syntax Example 



Free form example of data elements making up a digital signature 
where the signature is applied to multiple message fragments and a 
date/time stamp. This example is not meant to be taken literally, but 
is meant to be illustrative of the type of syntax that may be used. 

<Signature> 

<SignedInf o> 

<Signature Method 
Algorithm = RSA (1024bit)/> 
<Ref erenceContent> 

<ReferencetoFragmentl> 

<HashAlgorithm = SHA- 1 > 
<HashValue>A62E...</HashValue> 
</Ref erence> 
<Ref erencetoFragment2 > 

<HashAlgorithm = SHA-1> 
<HashValue>FOBC...</HashValue> 
</Ref erence> 
Authenticated Data> 
<Date>...</Date> 
<Time>...</Time> 
</Authenticated Data> 
<HashAlgorithm = SHA- 1 > 

<CumulativeHashValue>6E3l...</CumulativeHashValue> 
</Ref erenceContent> 
</SignedInf o> 

<SignatureValue>602C...</SignatureValue> 
<Unauthenticated Data> 
< 

</Unauthenticated Data> 
<KeyInf o> 

<X5 09ParsedData> 

<Sequence of X.509 Data Elements> 

<X509Serial # 

<X509Issuer name 

< . . 

<X509Subject name 

< . . 
</ 

</X5 0 9ParsedData> 

<X5 0 9Certif icate>MIIE...</X50 9 Cert if icate> 
</KeyInf o> 
</Signature> 



The < Cumulat iveHashValue > is the applied to HashValues one or more 
fragment or the total content and any Authenticated Data. 
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